CVE-2026-61932

The CVE-2026-61932 entry describes a type confusion vulnerability in the Windows DWM Core Library that allows an authorized attacker to achieve local privilege escalation . Affected component is the Windows DWM Core Library; root cause is resource access via incompatible type. The provided docume...

CVE-2026-65678

CVE-2026-65678: A use-after-free in Windows Win32K enables an in-local privilege elevation by an authorized attacker. Affected software is Windows with Win32K component; the vulnerability arises from improper lifecycle handling leading to use-after-free conditions. The CVSS score is 7.0 (High) wi...

CVE-2016-7184

The CVE-2016-7184 issue affects the Common Log File System (CLFS) driver in Windows operating systems ranging from Windows Vista SP2 to Windows Server 2016 (including Windows 10 versions 1511 and 1607). The vulnerability enables local users to achieve privilege escalation via a crafted applicatio...

CVE-2017-0097

CVE-2017-0097 affects Hyper-V in multiple Windows platforms (Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, 8.1, Server 2012/R2, Windows 10 up to 1607 and Server 2016). The vulnerability allows a guest OS user, running as a VM, to cause a denial of service on the host via a crafted application. Th...

CVE-2017-0270

CVE-2017-0270 is an SMBv1 information-disclosure vulnerability in Microsoft Windows SMB Server handling of certain requests. The connected documents indicate the issue arises from improper handling of SMBv1 requests, enabling an attacker to obtain sensitive information from affected systems. Affe...

CVE-2017-11849

The CVE-2017-11849 entry concerns the Windows kernel information disclosure vulnerability. Affected software includes Windows kernel on Windows 7 SP1; Windows Server 2008 SP2/R2 SP1; Windows 8.1/RT 8.1; Windows Server 2012/R2; Windows 10 versions (Gold, 1511, 1607, 1703, 1709); and Windows Server...

CVE-2017-8574

CVE-2017-8574 describes a local elevation-of-privilege in the Microsoft Windows Graphics Component. Affected software includes Windows 10 versions 1607 and 1703 (and Windows Server 2016) where the Graphics component fails to properly handle objects in memory, enabling a local attacker to run code...

CVE-2018-8637

CVE-2018-8637 is a Windows kernel vulnerability (Win32k Information Disclosure) that can disclose memory addresses from kernel space, potentially bypassing KASLR. Affected: Windows kernel components (Win32k) on Windows 10/Windows Server 2019. Root cause: how the kernel handles memory addresses en...

CVE-2019-0717

CVE-2019-0717 is a Microsoft Hyper-V Denial of Service vulnerability in the Hyper-V Network Switch (vmswitch.sys). A privileged user on a guest OS can craft input that, if exploited, crashes the host server. The underlying issue is improper input validation when guest VMs access the Hyper-V Netwo...

CVE-2019-1227

The CVE-2019-1227 entry describes an information-disclosure vulnerability in the Windows kernel where objects in memory are not handled securely. An attacker who can log on to an affected system and run a crafted application could obtain information to aid further compromise; the issue does not b...

CVE-2019-1336

CVE-2019-1336 describes an elevation-of-privilege vulnerability in the Microsoft Windows Update Client caused by improper handling of privileges. The issue is local and affects the Windows Update Client; the CVE is distinct from CVE-2019-1323. The provided documents do not specify affected versio...

CVE-2019-1472

CVE-2019-1472 is described in CNVD-2020-02181 as a Microsoft Windows Kernel Information Disclosure Vulnerability. It results from improper handling of memory objects in the Windows kernel; an attacker who can log on to an affected system and run a specially crafted application could disclose info...

CVE-2020-0660

CVE-2020-0660 is a denial-of-service vulnerability in the Windows Remote Desktop Protocol (RDP). According to the trusted sources, an attacker can trigger the issue by establishing an RDP connection and sending specially crafted requests, resulting in a disruption of availability. The public reco...

CVE-2020-0721

Technical details for CVE-2020-0721 are not publicly available in the provided documents . Monitor for updates in case further specifics on affected products, impact, or fixes are released.

CVE-2020-0740

CVE-2020-0740 describes an Elevation of Privilege in the Connected Devices Platform Service on Microsoft Windows and Microsoft Windows Server. The root cause is a flaw in how the service handles objects in memory, enabling a local attacker with low privileges to execute code with user/system righ...

CVE-2020-0928

CVE-2020-0928 is a Windows kernel information-disclosure vulnerability. The root cause is the Windows kernel’s improper handling of memory objects, which could allow an attacker who logs on and runs a crafted application to obtain information that could help further compromise the system. The vul...

CVE-2020-0936

CVE-2020-0936 is an Elevation of Privilege vulnerability in Windows/Windows Server caused by a Windows Scheduled Task that fails to properly handle file redirections. CNVD-2020-32583 describes the root cause as improper file redirection handling in the scheduled task, enabling an authenticated at...

CVE-2020-0993

Technical details about CVE-2020-0993 are not publicly provided in the supplied connected documents. The materials reference the Windows DNS DoS vulnerability but do not specify affected products/versions, root cause, exploitation status, or fixes. Monitor for updates.

CVE-2020-1006

CVE-2020-1006 affects the Windows Push Notification Service (WNS) in Windows. The root cause is an elevation of privilege due to how memory objects are handled by WNS, enabling a locally authenticated attacker to escalate privileges. The CVSS data indicates a LOCAL attack vector with LOW required...

CVE-2020-1014

CVE-2020-1014 is described in connected docs as an elevation of privilege in the Microsoft Windows Update Client caused by improper privilege handling. The CNVD entry attributes the flaw to the Windows Update Client, enabling privilege escalation, and the OpenVAS/MSKB references corroborate this ...

CVE-2020-1077

CVE-2020-1077 is a Windows Runtime elevation of privilege vulnerability caused by improper handling of objects in memory. The entry notes local attack vector with low complexity and partial/high impact per CVSS metrics, but the connected documents do not provide concrete technical details, affect...

CVE-2020-1081

CVE-2020-1081 is an elevation-of-privilege issue in the Windows Printer Service caused by improper validation of file paths when loading printer drivers. Affected product: Windows Printer Service. Root cause details and specific vulnerable versions are not enumerated in the provided documents bey...

CVE-2020-1188

Technical details about CVE-2020-1188 are not provided in the supplied documents; no affected products, versions, exploitation, or remediation details are included. Monitor for updates in connected sources.

CVE-2020-1252

Technical details for CVE-2020-1252 are not publicly available in the provided Connected Documents; the sources here reference related updates (e.g., RemoteFX, CVE-2020-1036) but do not specify affected product/version/root cause/mitigation for this CVE. Monitor for updates.

CVE-2020-1294

Technical details about CVE-2020-1294 are not provided in the connected documents. Monitor for updates from Microsoft/MSRC and NVD for affected components, impacts, and fixes.

CVE-2020-1330

CVE-2020-1330 is an information-disclosure vulnerability in Windows Mobile Device Management Diagnostics. The issue arises when MDM Diagnostics improperly handles junctions, enabling an attacker who can log on to read files via a specially crafted application. Microsoft’s advisory states that the...

CVE-2020-1336

Technical details public in the provided documents are limited; the connected items do not disclose exact affected products/versions, root cause, or fixes for CVE-2020-1336. Monitor official advisories for precise impact and remediation.

CVE-2020-1356

CVE-2020-1356 affects the Windows iSCSI Target Service and is described as an Elevation of Privilege vulnerability caused by improper handling of file operations. The NVD entry notes local access Vector with Low complexity and that exploitation could grant Partial confidentiality/integrity/availa...

CVE-2020-1358

CVE-2020-1358 corresponds to a memory-handling information disclosure in the Windows Resource Policy component. The initial description notes that exploitation requires prior code execution on the victim system, implying local access is needed, with the vulnerability potentially exposing memory-c...

CVE-2020-16973

Technical details for CVE-2020-16973 are not publicly available in the provided connected documents. The initial description notes an elevation of privilege via Windows Backup Service file operations with local access. Monitor for updates.

CVE-2020-17028

Technical details for CVE-2020-17028 are not publicly provided in the supplied documents. Monitor for updates to disclosure, patch availability, and affected products.

CVE-2020-17045

Technical details for CVE-2020-17045 are not publicly provided in the supplied documents. No affected product/version/exploit information is included here. Monitor for updates from authoritative sources to obtain concrete details and remediation guidance.

CVE-2020-17094

CVE-2020-17094 is described as a Windows Error Reporting Information Disclosure Vulnerability. The connected sources provide a CVSS 3.1 base vector (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) with a Medium severity and High confidentiality impact, plus a CVSS2 base score of 5.5. The documents do not sp...

CVE-2021-1691

CVE-2021-1691 is described in the primary CVE record as a Windows Hyper-V Denial of Service vulnerability with a CVSS v3.1 base score of 7.7 (HIGH) and network attack vector; no exploitation status is provided in the documents. A connected Kaspersky entry (KLA12045) lists this CVE among multiple ...

CVE-2021-24098

Technical details about CVE-2021-24098 are not provided in the connected documents. The entries only state a Windows Console Driver Denial of Service vulnerability. Monitor for updates from Microsoft and security advisories for any clarified scope and remediation.

CVE-2021-24107

Technical details for CVE-2021-24107 are not publicly provided in the connected documents; sources mention the vulnerability name in update KBs but do not specify affected products, root cause, or fixes.

CVE-2021-26862

Technical details about CVE-2021-26862 (affected product/component, root cause, impact, or patch) are not provided in the connected documents. Monitor official advisories for updates; current sources only confirm the vulnerability name/type without specifics.

CVE-2021-28311

CVE-2021-28311 is a Windows Application Compatibility Cache Denial of Service vulnerability. The connected documents confirm a Windows OS-level issue affecting the Application Compatibility Cache, with mitigation via March/April 2021 Windows security updates (e.g., KB5001330/KB5001337 and related...

CVE-2021-43235

Technical details for CVE-2021-43235 are not publicly available in the provided documents. Monitor for updates from official sources; currently only CVSS metrics and references are noted.

CVE-2021-43239

CVE-2021-43239 is a Windows Privilege Escalation vulnerability affecting the Windows Recovery Environment (WinRE) Agent. The NVD entry describes a local, low-attack-complexity flaw with high impact on confidentiality, integrity, and availability (CVSSv3.1 base score 7.8). NCSC integration lists r...

CVE-2023-35309

MSMQ Remote Code Execution vulnerability CVE-2023-35309 is discussed in the connected AVLEONOV article as an MSMQ RCE requiring an attacker to send a malicious MSMQ packet to an MSMQ server. The article also suggests blocking TCP port 1801 as a mitigation and notes the vulnerability context among...

CVE-2024-35270

Technical details about CVE-2024-35270 (Windows iSCSI Service DoS) are not provided in the connected documents. Monitor for official advisories and Microsoft updates for affected products and remediation.

CVE-2024-38091

Technical details for CVE-2024-38091 are not provided in the connected documents. Monitor for updates; no affected products, root cause, vectors, or fixes are stated here.

CVE-2024-38126

CVE-2024-38126 affects Windows Network Address Translation (NAT). The provided table lists it under Windows NAT with a CVSS v3.1 score of 7.5 (HIGH) and impact as Denial-of-Service. Other connected documents reference general Microsoft Windows fixes but do not provide concrete technical details (...

CVE-2024-43551

Technical details for CVE-2024-43551 (Windows Storage Elevation of Privilege) are not publicly provided in the supplied connected documents. The records confirm the vulnerability exists, but root cause, affected products/versions, exploit specifics, or fixes are not disclosed here. Monitor MSRC u...

CVE-2025-21252

Technical details about CVE-2025-21252 are not publicly available in the provided documents. Monitor for updates from Microsoft and NVD for affected products, impact, and remediation.

CVE-2025-21266

CVE-2025-21266 is a Windows Telephony Service remote code execution vulnerability. The linked data shows a network-exposed impact with CVSS v3.1 base score 8.8 (HIGH), requiring user interaction for exploitation and affecting confidentiality, integrity, and availability. Affected component is the...

CVE-2025-21282

Technical details about CVE-2025-21282 are not publicly provided in the supplied documents. No affected product/version or exploit information is disclosed here. Monitor for updates from official advisories and CVE/NVD entries.

CVE-2025-26634

CVE-2025-26634 describes a heap-based buffer overflow in Windows Core Messaging that could allow an unauthenticated? not; authorized attacker to elevate privileges over a network. The CVE entry lists a CVSS v3.1 base score of 7.5 (HIGH) with NETWORK attack vector, HIGH impact on confidentiality/i...

CVE-2025-26673

CVE-2025-26673 is Windows LDAP (LDAP) Denial-of-Service. The connected data confirms that the LDAP service can be abused to exhaust resources and disable service over the network (DoS). Remediation, where provided, points to Microsoft security updates; update Windows to the April 2025 bundle (KB5...